can 1 computer VPN to multiple networks, and what does this take?

[drummelhart]

I have setup RADIUS on my companies PIX Firewall. Saddly, all clients who access the VPN loose connection to their companies' network.

IS there a way to allow the user to access their network as well as our network without having to run a CISCO VPN Client?

 

[brianinms]

Yes, its called split-tunneling.

 

[drummelhart]

and with that said, we are talking about having to run a cisco vpn client in order to achieve this right?

 

[brianinms]

Here are the instructions for split tunneling

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080702999.shtml

Here are the instructions for L2tp

http://www.cisco.com/en/US/products...s_configuration_example09186a00807213a7.shtml

No, you shouldn't need the Cisco VPN client to do this. However, I never configure a vpn without having the endusers use the provided client.

 

[drummelhart]

I have a PIX 506e. Will it run with this code?

 

[brianinms]

No, a 506e is running 6.x code. If you are using a pptp vpn via the microsuck client then no split-tunneling isnt supported to my knowledge.

 

[brianinms]

I found a workaround on Cisco's website. However, I would ditch pptp and move to ipsec with the cisco client.

http://supportwiki.cisco.com/ViewWi...onfigure_split_tunneling_for_PPTP_connections

 

[drummelhart]

we create all our apps using MS, and our clients do the same. For us to make our clients use something such as vpnclient 3000 would bankrupt our company

 

[brianinms]

No, the Cisco client I am referring to is actually a piece of software you install on each machine. It is included with the purchase of your 506 and you can distribute it as needed. Keep in mind a 506 is limited to 25 simultaneous vpn users.

 

[drummelhart]

even the 506e? with the unlimited package?

 

[brianinms]

Yes, the maximum number of vpn users you can have connected at the same time is 25. Its merely a hardware limitation.

You will see it listed under product specs.

http://www.cisco.com/en/US/prod/col...s4336/product_data_sheet09186a0080091b13.html

 

[drummelhart]

Maximum number of simultaneous site-to-site or remote access IKE Security Associations (SAs) supported


I am not using IKE. Would that make a dufference?

 

[brianinms]

It doesn't affect pptp users, however to fix your split tunnel issue the best option is to move to ipsec.

 

[drummelhart]

And at that point I am only allowed 25?

 

[brianinms]

Correct.